Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/ec749261-21d5-3145-9684-d93e7631475d.roa
File:                     ec749261-21d5-3145-9684-d93e7631475d.roa (raw, json)
Hash identifier:          cGFqKlUe0UI2ZkzjK/EBHc9S3+c1AM3Ez0tkqJi8PxE=
Subject key identifier:   B0:9C:BE:B1:15:FE:16:9E:3A:09:C3:BD:2B:B2:93:75:90:E0:6C:90
Certificate issuer:       /CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c
Certificate serial:       010D0C9F43285848B8F0CAE749396121B9000B80
Authority key identifier: 27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/ec749261-21d5-3145-9684-d93e7631475d.roa
Signing time:             Fri 31 Jan 2025 02:00:39 +0000
ROA not before:           Fri 31 Jan 2025 02:00:39 +0000
ROA not after:            Thu 01 May 2025 01:00:39 +0000
asID:                     125
IP address blocks:        199.64.34.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b8:f0:ca:e7:49:39:61:21:b9:00:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c
        Validity
            Not Before: Jan 31 02:00:39 2025 GMT
            Not After : May  1 01:00:39 2025 GMT
        Subject: CN=70c81eae-b83c-4ffc-b64e-0de95e6dca66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6c:3f:2e:dc:2d:bb:f5:2d:d6:ab:74:74:aa:
                    47:80:32:fe:6a:e0:e7:6f:5d:61:ac:d6:77:65:f0:
                    a2:6a:ea:e1:bc:f5:4a:27:19:23:82:6b:fe:5d:08:
                    66:3c:4a:ed:c1:da:4d:8e:e0:a2:8a:5e:9c:ac:1b:
                    3f:8b:0d:ce:ac:f5:f3:0f:98:3a:ba:00:47:36:ea:
                    53:2b:01:58:d7:39:53:14:78:e8:80:a2:1a:4f:80:
                    ef:d8:c5:9a:26:09:7f:53:6f:8b:f5:02:8c:62:d1:
                    bd:bd:ef:14:6e:04:d5:d8:35:91:e4:4e:da:fe:c0:
                    7f:53:0a:38:3a:68:a2:d6:72:ff:21:25:ca:86:c1:
                    57:aa:c9:e5:73:c7:13:42:54:63:09:9b:5b:da:78:
                    34:7f:d0:28:f7:40:3f:a4:73:30:32:0f:09:46:2c:
                    3f:f5:53:de:f7:20:9c:7e:08:1b:8e:da:7c:2d:18:
                    61:4b:f4:aa:42:8a:ff:fb:60:b4:30:56:51:5d:87:
                    11:d3:31:7f:6b:b9:23:72:0d:73:9f:a5:bf:5e:61:
                    26:a4:b4:44:f8:d0:74:9a:d0:d4:18:8c:4e:63:25:
                    68:3e:11:e0:84:46:15:b0:68:aa:ee:35:b3:cf:dd:
                    04:97:c8:a0:6d:f9:01:63:87:07:4d:8d:55:16:03:
                    3a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:9C:BE:B1:15:FE:16:9E:3A:09:C3:BD:2B:B2:93:75:90:E0:6C:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/ec749261-21d5-3145-9684-d93e7631475d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl

            X509v3 Authority Key Identifier:
                keyid:27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.64.34.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:29:47:38:20:e7:39:55:24:c6:10:07:e9:b5:0b:d2:1f:c9:
         55:71:7e:6b:f0:24:f8:d7:e9:eb:c9:f2:f8:8f:ac:17:f1:07:
         40:04:1c:db:38:59:96:a6:10:aa:c2:6e:2d:cd:b6:07:76:e1:
         2d:39:15:a2:ee:98:89:55:58:a2:eb:04:a1:c7:42:c8:a3:ca:
         24:42:09:d6:88:96:89:ac:54:c3:76:4e:c5:31:a9:9a:8a:d3:
         7a:a5:15:01:19:08:2c:94:64:0b:f3:33:ab:d9:05:f5:79:15:
         d0:14:0c:c7:99:bb:c2:a1:25:ca:cd:77:7e:c8:dd:61:38:24:
         35:39:e1:92:47:f5:74:4c:31:16:d2:5f:bf:2d:f9:91:d3:3d:
         4d:56:d0:bc:37:99:e9:c4:38:d7:1d:13:31:70:d2:d9:1c:62:
         df:ce:29:21:67:08:cb:bd:55:30:c9:a7:34:f5:4c:a4:08:b9:
         51:d9:fb:31:b2:58:ae:a3:1d:98:29:2c:8e:4e:5a:fe:7a:cd:
         70:4d:f0:3f:08:ed:28:0c:af:f6:f4:02:bc:68:86:4c:10:d3:
         a6:8c:dd:bb:22:a4:b4:9a:94:17:36:57:a5:a7:d7:80:15:35:
         9d:9f:cd:7d:7c:ff:27:3f:ec:5e:ea:04:79:36:69:4a:b5:38:
         2e:ab:b2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:51:49 2025 by rpki-client